WARNING: 5.83 portable includes secret dll

[mogli]

When starting version 5.83 portable CCleaner64.exe (SHA: B3CD84848A587AD11D0F7446248EAE7A6064E86B) sometimes unpacks a file named gcapi_*.dll (the * stands for a couple of digits) and then quickly hides it again.

Please explain yourself!

edit: The file is gcapi.dll 85.0.4183.0 (SHA: A8433CAB1DEB9C128C745057A809B42110001F55), i.e. the google cloud api interface. So they hide it in the exe, unpack it with a random number added to its name so you cannot block it by name, hide it in ram and phone home. Nice stuff and totally trustworthy.

 

Edited July 20, 2021 by mogli

[Dave CCleaner]

2 hours ago, mogli said:

Please explain yourself!

The gcapi dll has been in the CCleaner installer since CCleaner 3.01 - which was released back in October 2010 (https://www.ccleaner.com/ccleaner/version-history).  Over 10 years ago.  So this is not very new.

[mogli]

I see. So it was decided that it wasn't enough to have it in the installer only and now with 5.83 it was added to the CCleaner executable, too, so that you cannot easily delete it.
What does it do?